Terraform Building Blocks Failing with "unable to verify checksums signature: openpgp: key expired"
S
Stefan Tomm
Who is affected
Only customers using Terraform <= 1.5.5 (not OpenTofu) are affected. This is caused by an expired PGP signing key used to verify Terraform binary checksums during installation.
Root cause
This is a known upstream bug in HashiCorp's hc-install tool, which meshStack uses internally to download and verify Terraform binaries. The issue is present since 18.04.2026. The issue has been reported to HashiCorp:
Workaround / Fix
We are currently investigating a workaround on our end. Using OpenTofu instead of Terraform would solve the issue, but we are currently checking the consequences of this migration for existing Building Blocks.
Status: Under investigation — no fix available from HashiCorp yet.